Skip to content

Instantly share code, notes, and snippets.

@Nepherte
Last active December 6, 2023 06:34
Show Gist options
  • Save Nepherte/c19f88293c0e60fd725f7220aadce060 to your computer and use it in GitHub Desktop.
Save Nepherte/c19f88293c0e60fd725f7220aadce060 to your computer and use it in GitHub Desktop.
Apple macOS Profile for Mullvad Encryted DNS (HTTPS)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
"http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<!-- Use Mullvad Encrypted DNS (HTTPS) -->
<key>DNSSettings</key>
<dict>
<key>DNSProtocol</key>
<string>HTTPS</string>
<key>ServerAddresses</key>
<array>
<string>2a07:e340::2</string>
<string>194.242.2.2</string>
</array>
<key>ServerURL</key>
<string>https://dns.mullvad.net/dns-query</string>
</dict>
<!-- Enable/disable this profile when certain rules are met. -->
<key>OnDemandEnabled</key>
<integer>1</integer>
<!-- Rules are processed from top to bottom. First rule that matches is used. -->
<key>OnDemandRules</key>
<array>
<!-- Disable when connected to specific WiFI networks. -->
<dict>
<key>InterfaceTypeMatch</key>
<string>WiFi</string>
<key>SSIDMatch</key>
<array>
<string>Inunu</string>
<string>Intergraph</string>
</array>
<key>Action</key>
<string>Disconnect</string>
</dict>
<!-- Enable when connected to other WiFI networks. -->
<dict>
<key>Action</key>
<string>Connect</string>
<key>InterfaceTypeMatch</key>
<string>WiFi</string>
</dict>
<!-- Disable when connected to Ethernet networks. -->
<dict>
<key>Action</key>
<string>Disconnect</string>
<key>InterfaceTypeMatch</key>
<string>Ethernet</string>
</dict>
<!-- Disable if not on WiFI or Ethernet networks. -->
<dict>
<key>Action</key>
<string>Disconnect</string>
</dict>
</array>
<key>PayloadDescription</key>
<string>Mullvad Encrypted DNS (HTTPS)</string>
<key>PayloadDisplayName</key>
<string>Mullvad Encrypted DNS (HTTPS)</string>
<key>PayloadIdentifier</key>
<string>
com.apple.dnsSettings.managed.4A06FE90-FBD6-4603-8CEC-FD1C94BF304C
</string>
<key>PayloadType</key>
<string>com.apple.dnsSettings.managed</string>
<key>PayloadUUID</key>
<string>4A06FE90-FBD6-4603-8CEC-FD1C94BF304C</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>ProhibitDisablement</key>
<false/>
</dict>
</array>
<key>PayloadDescription</key>
<string>Mullvad Encrypted DNS (HTTPS)</string>
<key>PayloadDisplayName</key>
<string>Mullvad Encrypted DNS (HTTPS)</string>
<key>PayloadIdentifier</key>
<string>com.paulmillr.apple-dns</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>C1B95E85-C40A-4A0F-8C80-8B44C5478171</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment